
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f22ad31-1c84-490b-a843-6ec8ce92d874.roa
File: 5f22ad31-1c84-490b-a843-6ec8ce92d874.roa (raw, json)
Hash identifier: fJTQ4VCYgC4VQikqzVWwLfrEzPhaFvGuFo/9nrSCyOY=
Subject key identifier: D3:C1:A5:B6:4F:97:CC:0D:2C:63:A7:87:65:34:60:1F:9D:63:C9:EB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 11D2BC9647AEC8649A2668B890793B212B305F25
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f22ad31-1c84-490b-a843-6ec8ce92d874.roa
Signing time: Mon 03 Aug 2026 00:20:35 +0000
ROA not before: Mon 03 Aug 2026 00:20:35 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 1.179.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:d2:bc:96:47:ae:c8:64:9a:26:68:b8:90:79:3b:21:2b:30:5f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 3 00:20:35 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=ce1d80aceea044fd4edf9b84d4ae5c9cda052f564e09c43b9e4f93c83396ff45, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:78:42:01:9a:42:f3:22:27:fd:ba:e7:e3:bc:
41:6f:c8:20:d3:3b:2e:91:20:ad:ba:aa:6b:eb:a7:
35:c1:8d:d7:71:70:ba:36:84:e0:87:3d:e1:0d:50:
15:4c:9c:86:65:4e:16:d1:4c:a8:01:5d:66:48:c4:
0d:d8:84:08:7e:6a:59:d4:43:1d:d4:87:5d:08:4b:
da:40:dd:75:cc:89:dd:b0:d2:67:f3:96:3e:14:36:
cb:d5:03:27:46:dd:53:80:a1:68:6a:b3:10:45:59:
c2:b0:6f:71:23:78:ed:4d:a8:a9:a6:95:24:cb:5d:
7b:13:49:94:74:44:6d:d7:b4:ae:60:6d:46:ea:a4:
8d:32:a8:48:d1:d6:0c:f2:98:37:3f:3d:26:f8:c3:
62:0d:67:2a:60:9f:48:0a:44:31:de:61:83:d3:3b:
6a:da:2c:35:5d:31:b0:44:c3:84:fb:96:b7:96:0d:
ac:00:b1:3b:00:a4:2c:82:3e:f3:5f:84:31:fd:b5:
db:19:38:b1:10:4e:2a:ed:d7:8e:27:cb:ee:3f:c5:
79:0c:c7:97:7f:03:dd:14:8a:dc:bd:40:69:07:d1:
46:5a:94:be:6d:f8:17:92:4e:90:ec:a4:89:37:59:
13:1a:a6:6b:5d:5c:d6:ef:d6:99:94:62:59:c4:f9:
10:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C1:A5:B6:4F:97:CC:0D:2C:63:A7:87:65:34:60:1F:9D:63:C9:EB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f22ad31-1c84-490b-a843-6ec8ce92d874.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.179.24.0/21
Signature Algorithm: sha256WithRSAEncryption
53:f5:6e:40:b3:f0:6d:ac:93:b2:0e:03:82:41:0b:1a:ab:7e:
d4:48:48:3b:4d:54:6b:d7:b5:c2:05:32:85:8d:20:a5:8b:53:
15:bf:ab:60:52:c0:6e:44:71:11:45:7d:c5:a3:32:38:49:ac:
91:74:c4:64:23:97:3f:a1:fa:6b:d0:6e:9c:98:52:bd:0a:38:
0b:44:31:5b:2e:80:9e:7d:b0:72:88:a5:a4:91:62:02:77:c4:
a7:ef:0b:ba:35:15:e3:2e:ea:f1:5c:7d:7b:d4:b0:4a:cf:cc:
a7:68:20:fb:ce:88:f8:d7:e4:34:3c:12:ee:b3:20:37:78:fc:
75:3e:e2:86:76:14:61:22:1c:fb:64:4f:7d:d4:81:3c:16:65:
dd:c8:b4:76:ab:7e:06:fb:59:b7:80:df:1c:cc:94:26:55:ed:
c0:07:38:9c:3a:74:d0:13:a9:88:1e:45:ea:55:f6:b1:31:25:
23:5c:b3:ff:65:2f:63:78:a0:5c:a3:1c:49:39:43:3c:25:88:
74:bc:d7:50:9f:6f:73:97:fb:8b:73:04:db:cb:09:16:35:66:
03:9a:dd:27:96:0e:c9:47:b8:f5:ad:d2:86:39:ca:a3:2c:35:
53:38:ff:01:92:85:b9:c0:ea:74:10:92:79:b9:7c:c5:80:90:
64:59:cf:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 06:56:57 2026 by rpki-client